[plug] Am I Being Hacked?

Scott, Simon Simon.Scott at SEALCORP.com.au
Tue May 9 13:29:11 WST 2000


Cleaner brings small child to work??? Child is happy slapping keys for five
minutes?

 "With all the security bugs in JavaScript and all the pages that use
  it, a lot of sites are best viewed with telnet www.something.com 80"
                                                       -- Darren Embry
> ------------------------------------------------------
>  Simon Scott
>  DBA
>  Sealcorp Holdings Limited
>  Perth, WA
>  e-mail:  simon.scott at sealcorp.com.au
>  phone:  08 9265 5648
> ------------------------------------------------------
> 
> 


> -----Original Message-----
> From: Earnshaw, Mike [mailto:earnshawm at wa.switch.aust.com]
> Sent: Tuesday, 9 May 2000 1:24
> To: 'plug at plug.linux.org.au'
> Subject: RE: [plug] Am I Being Hacked?
> 
> 
> Mike,
> 
> I thought the same, but the times given are after hours and 
> the room is
> locked (I have one of the three keys, manager the other, 
> cleaners master
> probably and admin key (which should be locked away after 
> hours)). Maybe the
> cleaner .... we have no vermin that resemble cats (or feet 
> warmers either
> ;-)
> 
> The three consecutive attempts are what threw me.
> 
> Mike
> 
> 
> > -----Original Message-----
> > From: Mike Holland [mailto:myk at golden.wattle.id.au]
> > Sent: Tuesday, May 09, 2000 1:13 PM
> > To: plug at plug.linux.org.au
> > Subject: Re: [plug] Am I Being Hacked?
> > 
> > 
> > On Tue, 9 May 2000, Christian wrote:
> > 
> > > > May  8 17:49:59 usswa login[14597]: FAILED LOGIN 1 FROM 
> (null) FOR
> > > > z.a^Z?toE~o^Pm%?^A^Ga^GLC, User not known to the 
> > underlying authentication
> > 
> > > added risk.)  The fact that login is reporting that the 
> > login attempt is
> > > from "(null)" is really odd -- if it were a network access 
> > attempt then
> > > I would expect to see the address of the host there while 
> a console
> > > login would obviously give the terminal line.
> > 
> > On my redhat box, a console login give the '(null)' .
> > Could it be line noise from a loose serial cable, or an elbow 
> > brushing the
> > keyboard ;-)   Maybe your cat.
> > 
> > 
> > Mike Holland  <mike at golden.wattle.id.au>
> >                           --==--
> > antispam: rot 13 my email xor with the first 20 letters of 
> > the king james bible and run crypt to mail me.
> > 
> > 
> > 
> 



More information about the plug mailing list